Back to CVE Browser

CVE-1999-0095

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1580%

EPSS Percentile15.73th

PublishedOct 1, 1988

Last ModifiedApr 16, 2026

Vulnerability Description

The debug command in Sendmail is enabled, allowing attackers to execute commands as root.

Affected Platforms (CPE)

📦

Eric Allman

Sendmail

= 5.58

References & Advisories

🔗 http://seclists.org/fulldisclosure/2019/Jun/16

🔗 http://www.openwall.com/lists/oss-security/2019/06/05/4

🔗 http://www.openwall.com/lists/oss-security/2019/06/06/1

🔗 http://www.osvdb.org/195

🔗 http://www.securityfocus.com/bid/1

🔗 http://seclists.org/fulldisclosure/2019/Jun/16

🔗 http://www.openwall.com/lists/oss-security/2019/06/05/4

🔗 http://www.openwall.com/lists/oss-security/2019/06/06/1

Related Vulnerabilities

CVE-1999-020310.0

In Sendmail, attackers can gain root privileges via SMTP by specifying an improper "mail from" address and an invalid "rcpt to" ad...

CVE-1999-020410.0

Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.

CVE-1999-056510.0

A Sendmail alias allows input to be piped to a program.

CVE-1999-020610.0

MIME buffer overflow in Sendmail 8.8.0 and 8.8.1 gives root access.